The Leaflet logo
The Leaflet

An independent platform for cutting-edge, progressive, legal, and political opinion.

Principal Identity Engineer

Full-stack EngineerSoftware EngineerFull TimeRemoteLeadTeam 11-50H1B No SponsorCompany SiteLinkedIn

Location

Florida

Posted

1 day ago

Salary

0

Seniority

Lead

Bachelor Degree10 yrs expExperience acceptedEnglishAWSAzureCloudGoogle Cloud PlatformPython

Job Description

Principal Identity Engineer

The Leaflet

• Own the security architecture, standards, authentication methods, and roadmap for Microsoft Entra ID, our primary identity provider — partnering with IT on tenant operations • Design and continuously refine Conditional Access policies that balance strong protection with a smooth experience for a globally distributed workforce • Advance our rollout of phishing-resistant, passwordless authentication (passkeys, certificate-based, FIDO2) • Own federation and single sign-on across our SaaS estate (SAML, OIDC, OAuth 2.0, SCIM provisioning) • Own our privileged access model using Microsoft Entra PIM — separate admin identities, just-in-time elevation, and approval workflows • Design and maintain break-glass procedures and safeguards for our most sensitive administrative paths • Reduce standing privilege across the environment and make "least privilege, just in time" the default • Automate the joiner-mover-leaver lifecycle so access is granted, changed, and revoked accurately and promptly • Build and run access reviews and entitlement governance, partnering with our GRC team on audit evidence (ISO 27001, SOC 2, PCI DSS, GLI-19/GLI-33) • Make access decisions auditable, explainable, and continuously right-sized • Govern service principles, managed identities, and workload/federated credentials across AWS, Azure, and GCP • Partner on secrets governance across our secrets management platforms to shrink the number of long-lived, standing secrets • Partner with our Principal Cloud & Network Security Engineer, who owns service-to-service authentication (mTLS, service mesh) • Serve as the identity authority for our Zero Trust program, aligned to NIST SP 800-207 and the CISA Zero Trust Maturity Model (Identity pillar) • Partner with our cloud and network security function on identity-aware access through Cloudflare Access • Partner with Security Operations to make identity signals (risky sign-ins, privileged elevation, MFA anomalies) first-class inputs to detection and response • Advise on customer identity (CIAM) and account-security architecture — partnering with our Principal Product Security Engineer, who owns the application security of player-facing account flows, and with product engineering

Job Requirements

  • 10+ years in identity and access management, security engineering, or a closely related field — or equivalent practical experience
  • Deep, hands-on expertise with a modern enterprise identity platform — Conditional Access, PIM/PAM, authentication methods, and identity governance (we run Microsoft Entra ID)
  • Strong command of identity protocols and patterns: SAML, OIDC, OAuth 2.0, SCIM, and modern MFA
  • Experience automating the identity lifecycle and integrating identity across a large SaaS and multi-cloud estate
  • Scripting and automation skills (PowerShell, Microsoft Graph API, Python) and comfort with Infrastructure as Code
  • A track record of designing least privilege, just-in-time access in a real production environment
  • Excellent written and verbal communication — you can explain an access decision to an engineer and a risk to an executive
  • Fluency with AI — you lead with it, reaching for AI tools daily to work faster and sharper; hands-on experience applying AI to security or engineering work is a must.

Benefits

  • Competitive pay and benefits
  • Flexible vacation allowance
  • A hybrid / remote working environment
  • Startup culture backed by a secure, global brand

Related Job Pages

More Full-stack Engineer Jobs

Pluribus Digital logo

Senior Software Engineer – Fullstack

Pluribus Digital

We help government agencies deliver public services as modern digital products.

Full TimeRemoteTeam 51-200H1B No Sponsor

• Design, develop, and maintain production-quality backend and frontend components • Build APIs, business logic, data access layers, and user interfaces • Implement new features while refactoring legacy functionality • Write unit, integration, and regression tests to support safe delivery • Refactor legacy Java applications (e.g., Struts/JBoss) into Spring Boot services • Support decomposition of monolithic systems into modular services • Maintain data integrity and backward compatibility during phased modernization • Diagnose and resolve defects in complex legacy codebases • Develop RESTful APIs using Java and Spring Boot • Implement data access with Hibernate/JPA • Support database modernization, schema evolution, and data migration • Apply consistent logging, error handling, and observability practices • Build and maintain React applications using TypeScript • Implement responsive UI behavior and secure backend integration • Collaborate with UX and backend teams on API contracts and user experience • Implement authentication and authorization using IAM solutions (e.g., Keycloak) • Apply OAuth 2.0 / OpenID Connect and role-based access control • Build with CI/CD, containerization, monitoring, and production readiness in mind • Collaborate with DevOps teams on deployment and operational support • Participate in sprint planning, refinement, estimation, and retrospectives • Contribute to code reviews, documentation, and knowledge sharing • Communicate progress, risks, and technical challenges clearly • Support the full SDLC—from requirements and estimation through deployment, monitoring, and documentation • Continuously learn and apply new tools/techniques to improve performance, automation, and scalability.

United States
$145K - $155K / year
Full TimeRemoteTeam 201-500H1B No Sponsor

• TELUS Digital is seeking a Senior Technical Lead (L4) to join our NCCS engineering team. • Lead the design, development, and modernization of enterprise applications using Java and GCP. • Analyze, understand, and modernize legacy applications, including Oracle Stored Procedures and Informatica PowerCenter workflows. • Design and develop scalable microservices using Java, Spring Boot, and cloud-native technologies. • Build and optimize SQL queries, data pipelines, and cloud-based data solutions. • Develop and maintain GCP-based applications utilizing Cloud SQL, BigQuery, Cloud Run, Cloud Storage, and Cloud Composer. • Provision and manage cloud infrastructure, including GCP projects, IAM, networking, logging, and storage. • Build Infrastructure-as-Code solutions using Terraform or Pulumi. • Develop and maintain CI/CD pipelines using GitHub Actions and Maven. • Configure secure connectivity across enterprise environments, including VPC networking and external integrations such as SAP Callidus. • Leverage AI-assisted development tools such as GitHub Copilot and Claude to improve development productivity and code quality. • Collaborate with cross-functional teams to deliver scalable, secure, and high-performing cloud solutions. • Provide technical leadership, mentorship, code reviews, and architectural guidance to engineering teams.

Canada
CA$110K - CA$115K / year
Full TimeRemoteTeam 11-50Since 2017H1B No Sponsor

• Design and implement new iOS features with a strong focus on usability, clarity, and delivering value to real users. • Build and maintain robust, scalable mobile architecture (including networking, data persistence, and state management) that supports fast iteration and long-term maintainability. • Work closely with Product Managers and Designers to translate requirements into practical, well-scoped technical solutions. Provide input during planning to ensure features are feasible, maintainable, and aligned with user and business goals. • Ensure high-quality releases through clean, readable, and well-tested code. Participate in code reviews and contribute to shared standards around quality, testing, and maintainability. • Take ownership of the features you build. Identify issues or gaps, propose improvements, and iterate based on feedback. You’re comfortable working with ambiguity and adapting as requirements evolve. • Improve app performance and reliability by diagnosing bottlenecks, addressing crashes, and strengthening overall stability and user experience.

Europe
Lumen Technologies logo

Lead AEM Software Developer

Lumen Technologies

Lumen Technologies is self-described as a global company of 40,000+ professionals empowering businesses, government, and communities to “produce amazing thing

Role Description Drive the end-to-end evolution and modernization of lumen.com by leveraging full-stack engineering expertise, cloud-native architecture, and an AI-first approach to software development, delivery, and operations. This role is responsible for designing and building scalable, high-performance digital experiences on Adobe Experience Manager as a Cloud Service (AEMaaCS), integrating robust APIs and services, and accelerating platform transformation through aggressive adoption of AI-assisted engineering practices. Main Responsibilities - Lead the design and development of scalable solutions on AEMaaCS, ensuring performance, resiliency, and cloud-native best practices. - Drive AI-enabled development practices, including: - AI-assisted coding, testing, and code reviews. - Automation of development workflows and documentation. - Use of AI for personalization, content optimization, and platform intelligence. - Build and integrate APIs, microservices, and composable architectures to support modern digital experiences. - Collaborate closely with Product, UX, Architecture, and Engineering teams to deliver customer-facing capabilities aligned with business goals. - Act as a critical bridge between US-based stakeholders and India engineering teams, translating business requirements into clear technical execution plans. - Accelerate decision-making, reduce delivery friction, and ensure alignment across distributed teams and time zones. - Contribute to platform modernization initiatives, including migration from legacy systems to modern frameworks and architectures. - Promote engineering excellence through best practices in CI/CD, observability, performance, and security. Qualifications - 5+ years professional experience with Adobe Experience Manager (AEM), preferably AEMaaCS. - 6+ years professional experience in modern frontend frameworks (React or Vue.js), and building scalable user interfaces. - Demonstrated experience or strong interest in AI-assisted software development practices. - Ability to leverage AI tools to: - Improve development velocity and code quality. - Support automation of repetitive engineering tasks. - Contribute to enhanced digital experiences through intelligent capabilities. - Experience designing and consuming APIs and distributed systems, with a good understanding of integration patterns and service-based architectures. - Strong understanding of cloud platforms and scalable architectures, ideally with experience in cloud-native or SaaS environments. - Proven experience working in Agile product delivery environments, collaborating with cross-functional teams. - Experience working with global teams and stakeholders, with strong communication and alignment skills. - Mindset oriented toward continuous improvement, innovation, and adoption of emerging technologies in a pragmatic way. Requirements - Experience with Adobe Experience Manager (AEM) and modern frontend frameworks. - Strong understanding of AI-assisted development practices. - Ability to design and consume APIs and distributed systems. - Experience in cloud-native or SaaS environments. - Experience in Agile product delivery environments. Benefits - Comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks. - Bonus structure (short-term incentives, long-term incentives and/or sales compensation).

United States
$105.8K - $155.2K / year